agentlint 0.1.0

package/dist/parsers/base.js

@@ -0,0 +1,373 @@
+"use strict";
+/**
+ * Base parser interface and utilities
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BaseParser = void 0;
+const hash_1 = require("../utils/hash");
+/**
+ * Base parser class
+ */
+class BaseParser {
+    sourceId;
+    minConfidence;
+    constructor(options) {
+        this.sourceId = options.sourceId;
+        this.minConfidence = options.minConfidence;
+    }
+    /**
+     * Create a base document structure
+     */
+    createBaseDocument(filePath, content, docType, format) {
+        return {
+            doc_id: (0, hash_1.generateId)('doc'),
+            source_id: this.sourceId,
+            path: filePath,
+            tool_family: this.getToolFamily(),
+            doc_type: docType,
+            format: format,
+            hash: {
+                algo: 'sha256',
+                value: (0, hash_1.hashDocument)(content),
+            },
+            parse: {
+                status: 'ok',
+                confidence: 1.0,
+                errors: [],
+                notes: [],
+            },
+            declared_intents: [],
+            instruction_blocks: [],
+            actions: [],
+            capabilities: [],
+            context_profile: this.createDefaultContextProfile(docType),
+            links: [],
+        };
+    }
+    /**
+     * Create default context profile based on document type
+     */
+    createDefaultContextProfile(docType) {
+        if (docType === 'hook') {
+            return {
+                primary: 'hook',
+                triggers: [{ type: 'unknown' }],
+                requires_user_confirmation: false,
+                runs_in_privileged_env: false,
+            };
+        }
+        return {
+            primary: 'interactive',
+            triggers: [],
+            requires_user_confirmation: true,
+            runs_in_privileged_env: false,
+        };
+    }
+    /**
+     * Create a shell exec action
+     */
+    createShellAction(command, anchors, context, dynamic = false, confidence = 0.9) {
+        const shellDetails = {
+            command,
+            dynamic,
+            patterns: dynamic ? this.extractDynamicPatterns(command) : undefined,
+        };
+        return {
+            action_id: (0, hash_1.generateId)('action'),
+            type: 'shell_exec',
+            context,
+            summary: dynamic ? 'Execute dynamic shell command' : 'Execute shell command',
+            anchors,
+            shell: shellDetails,
+            evidence: [
+                {
+                    kind: 'substring',
+                    value: command,
+                    confidence,
+                },
+            ],
+        };
+    }
+    /**
+     * Create a network action
+     */
+    createNetworkAction(url, anchors, context, fetchesExecutable = false, confidence = 0.9) {
+        const domain = this.extractDomain(url);
+        const networkDetails = {
+            direction: 'outbound',
+            domains: domain ? [domain] : [],
+            urls: [url],
+            fetches_executable: fetchesExecutable,
+        };
+        return {
+            action_id: (0, hash_1.generateId)('action'),
+            type: 'network_call',
+            context,
+            summary: fetchesExecutable ? 'Fetch executable content from network' : 'Network request',
+            anchors,
+            network: networkDetails,
+            evidence: [
+                {
+                    kind: 'substring',
+                    value: url,
+                    confidence,
+                },
+            ],
+        };
+    }
+    /**
+     * Create a file write action
+     */
+    createFileWriteAction(paths, anchors, context, confidence = 0.9) {
+        const sensitivePaths = paths.filter(p => this.isSensitivePath(p));
+        const filesystemDetails = {
+            operation: 'write',
+            paths,
+            sensitive_paths_touched: sensitivePaths.length > 0 ? sensitivePaths : undefined,
+        };
+        return {
+            action_id: (0, hash_1.generateId)('action'),
+            type: 'file_write',
+            context,
+            summary: sensitivePaths.length > 0 ? 'Write to sensitive paths' : 'Write to files',
+            anchors,
+            filesystem: filesystemDetails,
+            evidence: [
+                {
+                    kind: 'heuristic',
+                    value: `Write access to: ${paths.join(', ')}`,
+                    confidence,
+                },
+            ],
+        };
+    }
+    /**
+     * Create a secrets access action
+     */
+    createSecretsAction(envVars, files, anchors, context, propagatesTo = [], confidence = 0.9) {
+        const secretsDetails = {
+            reads_env_vars: envVars.length > 0 ? envVars : undefined,
+            reads_files: files.length > 0 ? files : undefined,
+            propagates_to: propagatesTo.length > 0 ? propagatesTo : undefined,
+        };
+        return {
+            action_id: (0, hash_1.generateId)('action'),
+            type: 'shell_exec', // Secrets are often accessed via shell
+            context,
+            summary: 'Access secrets or credentials',
+            anchors,
+            secrets: secretsDetails,
+            evidence: [
+                {
+                    kind: 'regex',
+                    value: [...envVars, ...files].join(', '),
+                    confidence,
+                },
+            ],
+        };
+    }
+    /**
+     * Derive capabilities from actions
+     */
+    deriveCapabilities(actions) {
+        const capabilities = [];
+        const capMap = new Map();
+        for (const action of actions) {
+            let capType;
+            switch (action.type) {
+                case 'shell_exec':
+                    capType = 'shell_exec';
+                    break;
+                case 'network_call':
+                    capType = 'network';
+                    break;
+                case 'file_read':
+                case 'file_write':
+                    capType = 'filesystem';
+                    break;
+                case 'git_operation':
+                    capType = 'git';
+                    break;
+                default:
+                    capType = 'unknown';
+            }
+            if (!capMap.has(capType)) {
+                capMap.set(capType, {
+                    cap_id: (0, hash_1.generateId)('cap'),
+                    type: capType,
+                    scope: {},
+                    derived_from_actions: [],
+                    confidence: 0,
+                });
+            }
+            const cap = capMap.get(capType);
+            cap.derived_from_actions.push(action.action_id);
+            cap.confidence = Math.max(cap.confidence, action.evidence[0]?.confidence || 0);
+            // Merge scope information
+            this.mergeActionIntoCapability(action, cap);
+        }
+        return Array.from(capMap.values());
+    }
+    /**
+     * Merge action details into capability scope
+     */
+    mergeActionIntoCapability(action, cap) {
+        switch (action.type) {
+            case 'shell_exec':
+                cap.scope.shell_exec = cap.scope.shell_exec || { enabled: false };
+                cap.scope.shell_exec.enabled = true;
+                if (action.shell?.command) {
+                    cap.scope.shell_exec.allowed_commands = cap.scope.shell_exec.allowed_commands || [];
+                    cap.scope.shell_exec.allowed_commands.push(action.shell.command);
+                }
+                break;
+            case 'network_call':
+                cap.scope.network = cap.scope.network || { outbound: false, inbound: false };
+                if (action.network?.direction === 'outbound') {
+                    cap.scope.network.outbound = true;
+                }
+                if (action.network?.direction === 'inbound') {
+                    cap.scope.network.inbound = true;
+                }
+                if (action.network?.domains) {
+                    cap.scope.network.allowed_domains = cap.scope.network.allowed_domains || [];
+                    cap.scope.network.allowed_domains.push(...action.network.domains);
+                }
+                break;
+            case 'file_write':
+                cap.scope.filesystem = cap.scope.filesystem || {};
+                cap.scope.filesystem.write = cap.scope.filesystem.write || [];
+                if (action.filesystem?.paths) {
+                    cap.scope.filesystem.write.push(...action.filesystem.paths);
+                }
+                break;
+            case 'file_read':
+                cap.scope.filesystem = cap.scope.filesystem || {};
+                cap.scope.filesystem.read = cap.scope.filesystem.read || [];
+                if (action.filesystem?.paths) {
+                    cap.scope.filesystem.read.push(...action.filesystem.paths);
+                }
+                break;
+        }
+    }
+    /**
+     * Extract dynamic execution patterns from a command
+     */
+    extractDynamicPatterns(command) {
+        const patterns = [];
+        // Check for curl/wget piped to shell
+        if (/curl.*\|.*(?:bash|sh|zsh)/i.test(command)) {
+            patterns.push('curl|bash');
+        }
+        if (/wget.*\|.*(?:bash|sh|zsh)/i.test(command)) {
+            patterns.push('wget|bash');
+        }
+        // Check for eval
+        if (/\beval\b/i.test(command)) {
+            patterns.push('eval');
+        }
+        // Check for variable interpolation in execution
+        if (/\$\{?\w+\}?/.test(command) && /(?:bash|sh|exec|run)/i.test(command)) {
+            patterns.push('variable_interpolation');
+        }
+        return patterns;
+    }
+    /**
+     * Extract domain from URL
+     */
+    extractDomain(url) {
+        try {
+            const match = url.match(/(?:https?:\/\/)?([^\/\s:]+)/);
+            return match ? match[1] : null;
+        }
+        catch {
+            return null;
+        }
+    }
+    /**
+     * Check if a path is considered sensitive
+     */
+    isSensitivePath(path) {
+        const sensitivePaths = [
+            '.git/',
+            '.github/workflows/',
+            '.env',
+            '.ssh/',
+            '~/.ssh/',
+            'credentials',
+            'secrets',
+            '.npmrc',
+            '.pypirc',
+            'id_rsa',
+            'id_ed25519',
+        ];
+        const normalizedPath = path.toLowerCase();
+        return sensitivePaths.some(sp => normalizedPath.includes(sp.toLowerCase()));
+    }
+    /**
+     * Known secret environment variables
+     */
+    KNOWN_SECRET_VARS = [
+        'GITHUB_TOKEN',
+        'GH_TOKEN',
+        'AWS_SECRET_ACCESS_KEY',
+        'AWS_ACCESS_KEY_ID',
+        'AZURE_CLIENT_SECRET',
+        'AZURE_SUBSCRIPTION_ID',
+        'GOOGLE_APPLICATION_CREDENTIALS',
+        'GCP_SERVICE_ACCOUNT',
+        'API_KEY',
+        'API_SECRET',
+        'SECRET_KEY',
+        'PRIVATE_KEY',
+        'DATABASE_PASSWORD',
+        'DB_PASSWORD',
+        'PASSWORD',
+        'TOKEN',
+        'NPM_TOKEN',
+        'PYPI_TOKEN',
+        'DOCKER_PASSWORD',
+        'SSH_PRIVATE_KEY',
+    ];
+    /**
+     * Check if an environment variable is a known secret
+     */
+    isKnownSecretVar(varName) {
+        const upperVar = varName.toUpperCase();
+        return this.KNOWN_SECRET_VARS.some(secret => upperVar === secret || upperVar.includes(secret));
+    }
+    /**
+     * Extract environment variable references from text
+     */
+    extractEnvVars(text) {
+        const matches = text.match(/\$\{?([A-Z_][A-Z0-9_]*)\}?/g) || [];
+        return matches.map(m => m.replace(/[${}]/g, ''));
+    }
+    /**
+     * Extract URLs from text
+     */
+    extractUrls(text) {
+        const urlRegex = /https?:\/\/[^\s'"<>]+/gi;
+        return text.match(urlRegex) || [];
+    }
+    /**
+     * Check if URL points to executable content
+     */
+    isExecutableUrl(url) {
+        const executablePatterns = [
+            /\.sh$/i,
+            /\.bash$/i,
+            /\.py$/i,
+            /\.rb$/i,
+            /\.js$/i,
+            /install\.sh/i,
+            /setup\.sh/i,
+            /bootstrap/i,
+            /get\.docker\.com/i,
+            /raw\.githubusercontent\.com/i,
+        ];
+        return executablePatterns.some(pattern => pattern.test(url));
+    }
+}
+exports.BaseParser = BaseParser;
+//# sourceMappingURL=base.js.map

package/dist/parsers/base.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.js","sourceRoot":"","sources":["../../src/parsers/base.ts"],"names":[],"mappings":";AAAA;;GAEG;;;AAuBH,wCAAyD;AAmBzD;;GAEG;AACH,MAAsB,UAAU;IACpB,QAAQ,CAAS;IACjB,aAAa,CAAS;IAEhC,YAAY,OAAsB;QAChC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IAC7C,CAAC;IAiBD;;OAEG;IACO,kBAAkB,CAC1B,QAAgB,EAChB,OAAe,EACf,OAAgB,EAChB,MAAiB;QAEjB,OAAO;YACL,MAAM,EAAE,IAAA,iBAAU,EAAC,KAAK,CAAC;YACzB,SAAS,EAAE,IAAI,CAAC,QAAQ;YACxB,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,IAAI,CAAC,aAAa,EAAE;YACjC,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,IAAA,mBAAY,EAAC,OAAO,CAAC;aAC7B;YACD,KAAK,EAAE;gBACL,MAAM,EAAE,IAAI;gBACZ,UAAU,EAAE,GAAG;gBACf,MAAM,EAAE,EAAE;gBACV,KAAK,EAAE,EAAE;aACV;YACD,gBAAgB,EAAE,EAAE;YACpB,kBAAkB,EAAE,EAAE;YACtB,OAAO,EAAE,EAAE;YACX,YAAY,EAAE,EAAE;YAChB,eAAe,EAAE,IAAI,CAAC,2BAA2B,CAAC,OAAO,CAAC;YAC1D,KAAK,EAAE,EAAE;SACV,CAAC;IACJ,CAAC;IAED;;OAEG;IACO,2BAA2B,CAAC,OAAgB;QACpD,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACvB,OAAO;gBACL,OAAO,EAAE,MAAM;gBACf,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;gBAC/B,0BAA0B,EAAE,KAAK;gBACjC,sBAAsB,EAAE,KAAK;aAC9B,CAAC;QACJ,CAAC;QACD,OAAO;YACL,OAAO,EAAE,aAAa;YACtB,QAAQ,EAAE,EAAE;YACZ,0BAA0B,EAAE,IAAI;YAChC,sBAAsB,EAAE,KAAK;SAC9B,CAAC;IACJ,CAAC;IAED;;OAEG;IACO,iBAAiB,CACzB,OAAe,EACf,OAAgB,EAChB,OAAoB,EACpB,UAAmB,KAAK,EACxB,aAAqB,GAAG;QAExB,MAAM,YAAY,GAAiB;YACjC,OAAO;YACP,OAAO;YACP,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;SACrE,CAAC;QAEF,OAAO;YACL,SAAS,EAAE,IAAA,iBAAU,EAAC,QAAQ,CAAC;YAC/B,IAAI,EAAE,YAAY;YAClB,OAAO;YACP,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,uBAAuB;YAC5E,OAAO;YACP,KAAK,EAAE,YAAY;YACnB,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,WAAW;oBACjB,KAAK,EAAE,OAAO;oBACd,UAAU;iBACX;aACF;SACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACO,mBAAmB,CAC3B,GAAW,EACX,OAAgB,EAChB,OAAoB,EACpB,oBAA6B,KAAK,EAClC,aAAqB,GAAG;QAExB,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,cAAc,GAAmB;YACrC,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;YAC/B,IAAI,EAAE,CAAC,GAAG,CAAC;YACX,kBAAkB,EAAE,iBAAiB;SACtC,CAAC;QAEF,OAAO;YACL,SAAS,EAAE,IAAA,iBAAU,EAAC,QAAQ,CAAC;YAC/B,IAAI,EAAE,cAAc;YACpB,OAAO;YACP,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC,uCAAuC,CAAC,CAAC,CAAC,iBAAiB;YACxF,OAAO;YACP,OAAO,EAAE,cAAc;YACvB,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,WAAW;oBACjB,KAAK,EAAE,GAAG;oBACV,UAAU;iBACX;aACF;SACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACO,qBAAqB,CAC7B,KAAe,EACf,OAAgB,EAChB,OAAoB,EACpB,aAAqB,GAAG;QAExB,MAAM,cAAc,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;QAClE,MAAM,iBAAiB,GAAsB;YAC3C,SAAS,EAAE,OAAO;YAClB,KAAK;YACL,uBAAuB,EAAE,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS;SAChF,CAAC;QAEF,OAAO;YACL,SAAS,EAAE,IAAA,iBAAU,EAAC,QAAQ,CAAC;YAC/B,IAAI,EAAE,YAAY;YAClB,OAAO;YACP,OAAO,EAAE,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,gBAAgB;YAClF,OAAO;YACP,UAAU,EAAE,iBAAiB;YAC7B,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,WAAW;oBACjB,KAAK,EAAE,oBAAoB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;oBAC7C,UAAU;iBACX;aACF;SACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACO,mBAAmB,CAC3B,OAAiB,EACjB,KAAe,EACf,OAAgB,EAChB,OAAoB,EACpB,eAAiD,EAAE,EACnD,aAAqB,GAAG;QAExB,MAAM,cAAc,GAAmB;YACrC,cAAc,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;YACxD,WAAW,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;YACjD,aAAa,EAAE,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;SAClE,CAAC;QAEF,OAAO;YACL,SAAS,EAAE,IAAA,iBAAU,EAAC,QAAQ,CAAC;YAC/B,IAAI,EAAE,YAAY,EAAE,uCAAuC;YAC3D,OAAO;YACP,OAAO,EAAE,+BAA+B;YACxC,OAAO;YACP,OAAO,EAAE,cAAc;YACvB,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,CAAC,GAAG,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;oBACxC,UAAU;iBACX;aACF;SACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACO,kBAAkB,CAAC,OAAiB;QAC5C,MAAM,YAAY,GAAiB,EAAE,CAAC;QACtC,MAAM,MAAM,GAAoC,IAAI,GAAG,EAAE,CAAC;QAE1D,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,OAAuB,CAAC;YAE5B,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;gBACpB,KAAK,YAAY;oBACf,OAAO,GAAG,YAAY,CAAC;oBACvB,MAAM;gBACR,KAAK,cAAc;oBACjB,OAAO,GAAG,SAAS,CAAC;oBACpB,MAAM;gBACR,KAAK,WAAW,CAAC;gBACjB,KAAK,YAAY;oBACf,OAAO,GAAG,YAAY,CAAC;oBACvB,MAAM;gBACR,KAAK,eAAe;oBAClB,OAAO,GAAG,KAAK,CAAC;oBAChB,MAAM;gBACR;oBACE,OAAO,GAAG,SAAS,CAAC;YACxB,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzB,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE;oBAClB,MAAM,EAAE,IAAA,iBAAU,EAAC,KAAK,CAAC;oBACzB,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,EAAE;oBACT,oBAAoB,EAAE,EAAE;oBACxB,UAAU,EAAE,CAAC;iBACd,CAAC,CAAC;YACL,CAAC;YAED,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAE,CAAC;YACjC,GAAG,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAChD,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,IAAI,CAAC,CAAC,CAAC;YAE/E,0BAA0B;YAC1B,IAAI,CAAC,yBAAyB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC9C,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACK,yBAAyB,CAAC,MAAc,EAAE,GAAe;QAC/D,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;YACpB,KAAK,YAAY;gBACf,GAAG,CAAC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;gBAClE,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC;gBACpC,IAAI,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;oBAC1B,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,gBAAgB,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,gBAAgB,IAAI,EAAE,CAAC;oBACpF,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBACnE,CAAC;gBACD,MAAM;YAER,KAAK,cAAc;gBACjB,GAAG,CAAC,KAAK,CAAC,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;gBAC7E,IAAI,MAAM,CAAC,OAAO,EAAE,SAAS,KAAK,UAAU,EAAE,CAAC;oBAC7C,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;gBACpC,CAAC;gBACD,IAAI,MAAM,CAAC,OAAO,EAAE,SAAS,KAAK,SAAS,EAAE,CAAC;oBAC5C,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;gBACnC,CAAC;gBACD,IAAI,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC;oBAC5B,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC;oBAC5E,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBACpE,CAAC;gBACD,MAAM;YAER,KAAK,YAAY;gBACf,GAAG,CAAC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC;gBAClD,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC9D,IAAI,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC;oBAC7B,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;gBAC9D,CAAC;gBACD,MAAM;YAER,KAAK,WAAW;gBACd,GAAG,CAAC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC;gBAClD,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC;gBAC5D,IAAI,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC;oBAC7B,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;gBAC7D,CAAC;gBACD,MAAM;QACV,CAAC;IACH,CAAC;IAED;;OAEG;IACO,sBAAsB,CAAC,OAAe;QAC9C,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,qCAAqC;QACrC,IAAI,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/C,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/C,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC7B,CAAC;QAED,iBAAiB;QACjB,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;QAED,gDAAgD;QAChD,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACzE,QAAQ,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAC1C,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACO,aAAa,CAAC,GAAW;QACjC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;YACvD,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACO,eAAe,CAAC,IAAY;QACpC,MAAM,cAAc,GAAG;YACrB,OAAO;YACP,oBAAoB;YACpB,MAAM;YACN,OAAO;YACP,SAAS;YACT,aAAa;YACb,SAAS;YACT,QAAQ;YACR,SAAS;YACT,QAAQ;YACR,YAAY;SACb,CAAC;QAEF,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAC1C,OAAO,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED;;OAEG;IACgB,iBAAiB,GAAG;QACrC,cAAc;QACd,UAAU;QACV,uBAAuB;QACvB,mBAAmB;QACnB,qBAAqB;QACrB,uBAAuB;QACvB,gCAAgC;QAChC,qBAAqB;QACrB,SAAS;QACT,YAAY;QACZ,YAAY;QACZ,aAAa;QACb,mBAAmB;QACnB,aAAa;QACb,UAAU;QACV,OAAO;QACP,WAAW;QACX,YAAY;QACZ,iBAAiB;QACjB,iBAAiB;KAClB,CAAC;IAEF;;OAEG;IACO,gBAAgB,CAAC,OAAe;QACxC,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAChC,MAAM,CAAC,EAAE,CAAC,QAAQ,KAAK,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAC3D,CAAC;IACJ,CAAC;IAED;;OAEG;IACO,cAAc,CAAC,IAAY;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,6BAA6B,CAAC,IAAI,EAAE,CAAC;QAChE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;IACnD,CAAC;IAED;;OAEG;IACO,WAAW,CAAC,IAAY;QAChC,MAAM,QAAQ,GAAG,yBAAyB,CAAC;QAC3C,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IACpC,CAAC;IAED;;OAEG;IACO,eAAe,CAAC,GAAW;QACnC,MAAM,kBAAkB,GAAG;YACzB,QAAQ;YACR,UAAU;YACV,QAAQ;YACR,QAAQ;YACR,QAAQ;YACR,cAAc;YACd,YAAY;YACZ,YAAY;YACZ,mBAAmB;YACnB,8BAA8B;SAC/B,CAAC;QAEF,OAAO,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/D,CAAC;CACF;AAzbD,gCAybC"}

package/dist/parsers/claude.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Claude Code configuration parser
+ * Handles: .claude/skills/*.md, .claude/agents/*.md, .claude/hooks/*, CLAUDE.md
+ */
+import { BaseParser, ParserResult, ParserOptions } from './base';
+import { ToolFamily } from '../ir/types';
+export declare class ClaudeParser extends BaseParser {
+    constructor(options: ParserOptions);
+    getToolFamily(): ToolFamily;
+    canHandle(filePath: string): boolean;
+    parse(filePath: string, content: string): ParserResult;
+    private determineDocType;
+    private determineFormat;
+    private determineTriggers;
+    private parseShellContent;
+    private parseMarkdownContent;
+    private parseTextContent;
+    private parseCodeBlockAsShell;
+    private detectInlineActions;
+    private detectInstructionOverrides;
+    private isDynamicShellExecution;
+    private containsShellCommand;
+    private containsFileWrite;
+    private extractWritePaths;
+    private determineSecretPropagation;
+    private isShellLanguage;
+    private classifyBlockKind;
+    private extractDeclaredIntents;
+}
+//# sourceMappingURL=claude.d.ts.map

package/dist/parsers/claude.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude.d.ts","sourceRoot":"","sources":["../../src/parsers/claude.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AACjE,OAAO,EAOL,UAAU,EAEX,MAAM,aAAa,CAAC;AAGrB,qBAAa,YAAa,SAAQ,UAAU;gBAC9B,OAAO,EAAE,aAAa;IAIlC,aAAa,IAAI,UAAU;IAI3B,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IASpC,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,YAAY;IAmDtD,OAAO,CAAC,gBAAgB;IAsBxB,OAAO,CAAC,eAAe;IAoBvB,OAAO,CAAC,iBAAiB;IAwBzB,OAAO,CAAC,iBAAiB;IAqFzB,OAAO,CAAC,oBAAoB;IAiF5B,OAAO,CAAC,gBAAgB;IAexB,OAAO,CAAC,qBAAqB;IAuC7B,OAAO,CAAC,mBAAmB;IA+D3B,OAAO,CAAC,0BAA0B;IAoClC,OAAO,CAAC,uBAAuB;IAe/B,OAAO,CAAC,oBAAoB;IAuB5B,OAAO,CAAC,iBAAiB;IAczB,OAAO,CAAC,iBAAiB;IAkBzB,OAAO,CAAC,0BAA0B;IAgBlC,OAAO,CAAC,eAAe;IAKvB,OAAO,CAAC,iBAAiB;IAgBzB,OAAO,CAAC,sBAAsB;CAa/B"}